From 61b15442898eeb1db2d23b6b2eb72a705ceb368a Mon Sep 17 00:00:00 2001 From: Азалия Смарагдова Date: Mon, 15 Aug 2022 12:19:11 +0500 Subject: Landlock support has been added. --- src/zsh_completion/_firejail.in | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'src/zsh_completion/_firejail.in') diff --git a/src/zsh_completion/_firejail.in b/src/zsh_completion/_firejail.in index 2b67c2a00..661929db9 100644 --- a/src/zsh_completion/_firejail.in +++ b/src/zsh_completion/_firejail.in @@ -105,6 +105,10 @@ _firejail_args=( '--keep-dev-shm[/dev/shm directory is untouched (even with --private-dev)]' '--keep-fd[inherit open file descriptors to sandbox]: :' '--keep-var-tmp[/var/tmp directory is untouched]' + '--landlock-read=-[Landlock read access rule]: :_files' + '--landlock-write=-[Landlock write access rule]: :_files' + '--landlock-restricted-write=-[Landlock write access rule that doesn't include creation of FIFO pipes, sockets and block devices]: :_files' + '--landlock-execute=-[Landlock execution-permitting rule]: :_files' '--machine-id[spoof /etc/machine-id with a random id]' '--memory-deny-write-execute[seccomp filter to block attempts to create memory mappings that are both writable and executable]' '*--mkdir=-[create a directory]:' -- cgit v1.2.3-54-g00ecf